CVEs

410,322 total · page 1989 of 8,207

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2025-13148	IBM Aspera Orchestrator	Hig	0.53	8.1	0.00	Dec 11, 2025	IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that password.
CVE-2024-42197	HCL Software Workload Scheduler	Med	0.36	5.5	0.00	Dec 11, 2025	HCL Workload Scheduler stores user credentials in plain text which can be read by a local user.
CVE-2025-56130	Ruijie Networks RG-S1930	Hig	0.57	8.8	0.02	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH_3.0(1)B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to the module_update in file /usr/local/lua/dev_config/ace_sw.lua.
CVE-2025-56129	Ruijie Networks RG-BCR	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_diagnosis in file /usr/lib/lua/luci/controller/admin/diagnosis.lua.
CVE-2025-56127	Ruijie Networks RG-BCR600W	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the get_wanobj in file /usr/lib/lua/luci/controller/admin/common.lua.
CVE-2025-56124	Ruijie Networks X60 PRO	Hig	0.51	7.8	0.01	Dec 11, 2025	OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56123	Ruijie Networks RG-EW1200G PRO	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56122	Ruijie Networks RG-EW1800GX PRO	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56120	Ruijie Networks X60 PRO	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
CVE-2025-56118	Ruijie Networks X60 PRO	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2025-56117	Ruijie Networks X30 Pro Firmware	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2025-56114	Ruijie Networks M18	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
CVE-2025-56113	Ruijie Networks RG-YST EST	Hig	0.57	8.8	0.02	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP_3.0(1)B11P280YST250F V1.xxV2.xx allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.
CVE-2025-56111	Ruijie Networks RG-BCR	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the network_set_wan_conf in file /usr/lib/lua/luci/controller/admin/netport.lua.
CVE-2025-56110	Ruijie Networks Rg Bcr860 Firmware	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_deal_update in file /usr/lib/lua/luci/controller/api/rcmsAPI.lua.
CVE-2025-56109	Ruijie Networks Rg Bcr860 Firmware	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_wireless in file /usr/lib/lua/luci/control/admin/wireless.lua.
CVE-2025-56108	Ruijie Networks Rg Ew300 Pro Firmware	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.
CVE-2025-56107	Ruijie Networks RG-BCR600W	Hig	0.57	8.8	0.02	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the submit_wifi in file /usr/lib/lua/luci/controller/admin/common_quick_config.lua.
CVE-2025-56106	Ruijie Networks RG-EW1800GX	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2025-56102	Ruijie Networks RG-EW1800GX	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56101	Ruijie Networks M18	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56099	Ruijie Networks RG-YST AP	Hig	0.57	8.8	0.02	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-YST AP_3.0(1)B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.
CVE-2025-56098	Ruijie Networks Rg Ew300 Pro Firmware	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56097	Ruijie Networks RG-EW1800GX PRO	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
CVE-2025-56096	Ruijie Networks RG-BCR600W	Hig	0.57	8.8	0.02	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the restart_modules in file /usr/lib/lua/luci/controller/admin/common.lua.
CVE-2025-56095	Ruijie Networks RG-EW1200G PRO	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2025-56094	Ruijie Networks Rg Ew300 Pro Firmware	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/host_access_delay.lua.
CVE-2025-56093	Ruijie Networks Rg Ew300 Pro Firmware	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the setWisp in file /usr/lib/lua/luci/modules/wireless.lua.
CVE-2025-56092	Ruijie Networks X30 Pro	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie X30 PRO V1 X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-14534	Utt 进取 512W	Cri	0.64	9.8	0.06	Dec 11, 2025	A vulnerability was determined in UTT 进取 512W up to 3.1.7.7-171114. This impacts the function strcpy of the file /goform/formNatStaticMap of the component Endpoint. Executing manipulation of the argument NatBind can lead to buffer overflow. The attack can be launched…
CVE-2025-14531	Carmelo Rental Management System	Med	0.28	4.3	0.00	Dec 11, 2025	A vulnerability was found in code-projects Rental Management System 2.0. This affects an unknown function of the file Transaction.java of the component Log Handler. Performing manipulation results in crlf injection. The attack can be initiated remotely. The exploit has been made…
CVE-2025-13780	Pgadmin.org Pgadmin4	Cri	0.52	9.1	0.01	Dec 11, 2025	pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting…
CVE-2025-66918	HashenUdara Edoc-doctor-appointment-system	Hig	0.57	8.8	0.01	Dec 11, 2025	edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.
CVE-2025-64669	Microsoft Windows Admin Center	Hig	0.51	7.8	0.00	Dec 11, 2025	Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally.
CVE-2025-56091	Ruijie Networks RG-EW1800GX	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
CVE-2025-56090	Ruijie Networks RG-EW1200G PRO	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
CVE-2025-56089	Ruijie Networks M18	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2025-56088	Ruijie Networks RG-BCR RG-BCR860	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_service in file /usr/lib/lua/luci/controller/admin/service.lua.
CVE-2025-56087	Ruijie Networks RG-BCR600W	Hig	0.57	8.8	0.02	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the run_tcpdump in file /usr/lib/lua/luci/controller/admin/common_tcpdump.lua.
CVE-2025-56086	Ruijie Networks RG-EW1200	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56085	Ruijie Networks RG-EW1200	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
CVE-2025-56084	Ruijie Networks RG-EW1800GX PRO	Hig	0.57	8.8	0.02	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2025-56083	Ruijie Networks ReyeeOS	Hig	0.57	8.8	0.02	Dec 11, 2025	OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_networkId_merge.lua.
CVE-2025-56082	Ruijie Networks RG-BCR600W	Hig	0.57	8.8	0.02	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the check_changes in file /usr/lib/lua/luci/controller/admin/common.lua.
CVE-2025-56079	Ruijie Networks RG-EW1300G	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-EW1300G EW1300G V1.00/V2.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56077	Ruijie Networks RG-RAP2200(E)	Hig	0.57	8.8	0.03	Dec 11, 2025	OS Command Injection vulnerability in Ruijie RG-RAP2200(E) 247 2200 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2025-14530	Sourcecodester Real Estate Property Listing App	Med	0.31	4.7	0.00	Dec 11, 2025	A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely.…
CVE-2025-14529	Campcodes Retro Basketball Shoes Online Store	Hig	0.47	7.3	0.01	Dec 11, 2025	A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The affected element is an unknown function of the file /admin/admin_running.php. This manipulation of the argument pid causes sql injection. It is possible to initiate the attack remotely. The exploit…
CVE-2025-14046	GitHub Enterprise Server	Med	0.40	6.1	0.00	Dec 11, 2025	An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed user-supplied HTML to inject DOM elements with IDs that collided with server-initialized data islands. These collisions could overwrite or shadow critical application state…
CVE-2025-13912	WolfSSL Wolfssl	Low	0.00	—	0.00	Dec 11, 2025	Multiple constant-time implementations in wolfSSL before version 5.8.4 may be transformed into non-constant-time binary by LLVM optimizations, which can potentially result in observable timing discrepancies and lead to information disclosure through timing side-channel attacks.

CVE-2025-13148HigDec 11, 2025
IBM
Aspera Orchestrator
risk 0.53cvss 8.1epss 0.00
IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that password.
CVE-2024-42197MedDec 11, 2025
HCL Software
Workload Scheduler
risk 0.36cvss 5.5epss 0.00
HCL Workload Scheduler stores user credentials in plain text which can be read by a local user.
CVE-2025-56130HigDec 11, 2025
Ruijie Networks
RG-S1930
risk 0.57cvss 8.8epss 0.02
OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH_3.0(1)B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to the module_update in file /usr/local/lua/dev_config/ace_sw.lua.
CVE-2025-56129HigDec 11, 2025
Ruijie Networks
RG-BCR
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_diagnosis in file /usr/lib/lua/luci/controller/admin/diagnosis.lua.
CVE-2025-56127HigDec 11, 2025
Ruijie Networks
RG-BCR600W
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the get_wanobj in file /usr/lib/lua/luci/controller/admin/common.lua.
CVE-2025-56124HigDec 11, 2025
Ruijie Networks
X60 PRO
risk 0.51cvss 7.8epss 0.01
OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56123HigDec 11, 2025
Ruijie Networks
RG-EW1200G PRO
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56122HigDec 11, 2025
Ruijie Networks
RG-EW1800GX PRO
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56120HigDec 11, 2025
Ruijie Networks
X60 PRO
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
CVE-2025-56118HigDec 11, 2025
Ruijie Networks
X60 PRO
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2025-56117HigDec 11, 2025
Ruijie Networks
X30 Pro Firmware
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2025-56114HigDec 11, 2025
Ruijie Networks
M18
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
CVE-2025-56113HigDec 11, 2025
Ruijie Networks
RG-YST EST
risk 0.57cvss 8.8epss 0.02
OS Command Injection vulnerability in Ruijie RG-YST EST, YSTAP_3.0(1)B11P280YST250F V1.xxV2.xx allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.
CVE-2025-56111HigDec 11, 2025
Ruijie Networks
RG-BCR
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the network_set_wan_conf in file /usr/lib/lua/luci/controller/admin/netport.lua.
CVE-2025-56110HigDec 11, 2025
Ruijie Networks
Rg Bcr860 Firmware
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_deal_update in file /usr/lib/lua/luci/controller/api/rcmsAPI.lua.
CVE-2025-56109HigDec 11, 2025
Ruijie Networks
Rg Bcr860 Firmware
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_wireless in file /usr/lib/lua/luci/control/admin/wireless.lua.
CVE-2025-56108HigDec 11, 2025
Ruijie Networks
Rg Ew300 Pro Firmware
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.
CVE-2025-56107HigDec 11, 2025
Ruijie Networks
RG-BCR600W
risk 0.57cvss 8.8epss 0.02
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the submit_wifi in file /usr/lib/lua/luci/controller/admin/common_quick_config.lua.
CVE-2025-56106HigDec 11, 2025
Ruijie Networks
RG-EW1800GX
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2025-56102HigDec 11, 2025
Ruijie Networks
RG-EW1800GX
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56101HigDec 11, 2025
Ruijie Networks
M18
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56099HigDec 11, 2025
Ruijie Networks
RG-YST AP
risk 0.57cvss 8.8epss 0.02
OS Command Injection vulnerability in Ruijie RG-YST AP_3.0(1)B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.
CVE-2025-56098HigDec 11, 2025
Ruijie Networks
Rg Ew300 Pro Firmware
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56097HigDec 11, 2025
Ruijie Networks
RG-EW1800GX PRO
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
CVE-2025-56096HigDec 11, 2025
Ruijie Networks
RG-BCR600W
risk 0.57cvss 8.8epss 0.02
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the restart_modules in file /usr/lib/lua/luci/controller/admin/common.lua.
CVE-2025-56095HigDec 11, 2025
Ruijie Networks
RG-EW1200G PRO
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2025-56094HigDec 11, 2025
Ruijie Networks
Rg Ew300 Pro Firmware
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/host_access_delay.lua.
CVE-2025-56093HigDec 11, 2025
Ruijie Networks
Rg Ew300 Pro Firmware
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the setWisp in file /usr/lib/lua/luci/modules/wireless.lua.
CVE-2025-56092HigDec 11, 2025
Ruijie Networks
X30 Pro
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie X30 PRO V1 X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-14534CriDec 11, 2025
Utt
进取 512W
risk 0.64cvss 9.8epss 0.06
A vulnerability was determined in UTT 进取 512W up to 3.1.7.7-171114. This impacts the function strcpy of the file /goform/formNatStaticMap of the component Endpoint. Executing manipulation of the argument NatBind can lead to buffer overflow. The attack can be launched…
CVE-2025-14531MedDec 11, 2025
Carmelo
Rental Management System
risk 0.28cvss 4.3epss 0.00
A vulnerability was found in code-projects Rental Management System 2.0. This affects an unknown function of the file Transaction.java of the component Log Handler. Performing manipulation results in crlf injection. The attack can be initiated remotely. The exploit has been made…
CVE-2025-13780CriDec 11, 2025
Pgadmin.org
Pgadmin4
risk 0.52cvss 9.1epss 0.01
pgAdmin versions up to 9.10 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. This issue allows attackers to inject and execute arbitrary commands on the server hosting…
CVE-2025-66918HigDec 11, 2025
HashenUdara
Edoc-doctor-appointment-system
risk 0.57cvss 8.8epss 0.01
edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.
CVE-2025-64669HigDec 11, 2025
Microsoft
Windows Admin Center
risk 0.51cvss 7.8epss 0.00
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally.
CVE-2025-56091HigDec 11, 2025
Ruijie Networks
RG-EW1800GX
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
CVE-2025-56090HigDec 11, 2025
Ruijie Networks
RG-EW1200G PRO
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
CVE-2025-56089HigDec 11, 2025
Ruijie Networks
M18
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2025-56088HigDec 11, 2025
Ruijie Networks
RG-BCR RG-BCR860
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_service in file /usr/lib/lua/luci/controller/admin/service.lua.
CVE-2025-56087HigDec 11, 2025
Ruijie Networks
RG-BCR600W
risk 0.57cvss 8.8epss 0.02
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the run_tcpdump in file /usr/lib/lua/luci/controller/admin/common_tcpdump.lua.
CVE-2025-56086HigDec 11, 2025
Ruijie Networks
RG-EW1200
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56085HigDec 11, 2025
Ruijie Networks
RG-EW1200
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
CVE-2025-56084HigDec 11, 2025
Ruijie Networks
RG-EW1800GX PRO
risk 0.57cvss 8.8epss 0.02
OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2025-56083HigDec 11, 2025
Ruijie Networks
ReyeeOS
risk 0.57cvss 8.8epss 0.02
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_networkId_merge.lua.
CVE-2025-56082HigDec 11, 2025
Ruijie Networks
RG-BCR600W
risk 0.57cvss 8.8epss 0.02
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the check_changes in file /usr/lib/lua/luci/controller/admin/common.lua.
CVE-2025-56079HigDec 11, 2025
Ruijie Networks
RG-EW1300G
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-EW1300G EW1300G V1.00/V2.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVE-2025-56077HigDec 11, 2025
Ruijie Networks
RG-RAP2200(E)
risk 0.57cvss 8.8epss 0.03
OS Command Injection vulnerability in Ruijie RG-RAP2200(E) 247 2200 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
CVE-2025-14530MedDec 11, 2025
Sourcecodester
Real Estate Property Listing App
risk 0.31cvss 4.7epss 0.00
A vulnerability has been found in SourceCodester Real Estate Property Listing App 1.0. The impacted element is an unknown function of the file /admin/property.php. Such manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely.…
CVE-2025-14529HigDec 11, 2025
Campcodes
Retro Basketball Shoes Online Store
risk 0.47cvss 7.3epss 0.01
A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The affected element is an unknown function of the file /admin/admin_running.php. This manipulation of the argument pid causes sql injection. It is possible to initiate the attack remotely. The exploit…
CVE-2025-14046MedDec 11, 2025
GitHub
Enterprise Server
risk 0.40cvss 6.1epss 0.00
An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed user-supplied HTML to inject DOM elements with IDs that collided with server-initialized data islands. These collisions could overwrite or shadow critical application state…
CVE-2025-13912LowDec 11, 2025
WolfSSL
Wolfssl
risk 0.00cvss —epss 0.00
Multiple constant-time implementations in wolfSSL before version 5.8.4 may be transformed into non-constant-time binary by LLVM optimizations, which can potentially result in observable timing discrepancies and lead to information disclosure through timing side-channel attacks.